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DETAILED ACTION 

Response to Amendment 

1. Applicant's amendment filed 21 January 2009 amends claims 1, 12-14, 19, and 20. 
Applicant's amendment has been fully considered and entered. 

Response to Arguments 

2. Applicant's arguments with respect to claims have been considered but are moot in view 
of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 112 

3. The following is a quotation of the first paragraph of 35 U.S.C. 112: 

The specification shall contain a written description of the invention, and of the manner and process of making 
and using it, in such full, clear, concise, and exact terms as to enable any person skilled in the art to which it 
pertains, or with which it is most nearly connected, to make and use the same and shall set forth the best mode 
contemplated by the inventor of carrying out his invention. 

4. Claims 12-13, and 20 are rejected under 35 U.S.C. 1 12, first paragraph, as failing to 
comply with the written description requirement. The claim(s) contains subject matter which 
was not described in the specification in such a way as to reasonably convey to one skilled in the 
relevant art that the inventor(s), at the time the application was filed, had possession of the 
claimed invention. The specification does not support converting each of the plurality of octet 
values into an alphanumeric octet value. The specification discloses converting a plurality of 
octet values into an alphanumeric value, but the specification is silent with respect to the final 
alphanumeric value being an octet value. 

Claim Rejections - 35 USC §103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 
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(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

6. The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1, 148 USPQ 459 
(1966), that are applied for establishing a background for determining obviousness under 35 
U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating obviousness 
or nonobviousness. 

7. Claims 1-6, 14, 15 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Lupper, U.S. Publication No. 2003/0171 1 12, in view of Chang, U.S. Patent No. 6,715,082, and 
further in view of Borgelt, U.S. Patent No. 5,398,285. Referring to claim 1, Lupper discloses a 
generic WLAN architecture wherein a subscriber name and password are obtained from the 
subscriber and compared to locally available subscriber data records ([0078]), which meets the 
limitation of creating a password for a client, storing the password and identification information 
of the client on a public wireless local area network. The subscriber name and password are 
compared with the data records to determine whether the subscriber can use services in the local 
area network ([0080]), which meets the limitation of utilizing the password and the client 
identity information to authenticate the client in the public wireless local area network. Lupper 
does not disclose that the passwords are one-time entropy passwords. However, it would have 
been obvious to one of ordinary skill in the art at the time the invention was made to use one- 
time entropy passwords in the WLAN of Lupper in order to reduce the security risks that are 
introduced from using fixed user information by using single use passwords that cannot be 
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reused by an intruder as taught by Chang (Col. 2, lines 12-24). Lupper and Chang do not specify 
passwords that are generated using an identifier, encryption key, and a character string. Borgelt 
discloses passwords generated utilizing an identifier (Figure 2, 200), encryption key (Figure 2, 
202), and a software code (Figure 2, 201). It would have been obvious to one of ordinary skill in 
the art at the time the invention was made to generate the passwords of Lupper, as modified with 
Chang, with an identifier, key, and addition character string, in order to utilize passwords that are 
unique to users and not easily obtainable as taught by Borgelt (Col. 2, lines 7-11). 

Referring to claim 2, Lupper discloses utilizing the RADIUS protocol ([0083]), which 
meets the limitation of the authentication is provide by a Remote Authentication Dial-In User 
Server (RADIUS) server. 

Referring to claims 3-5, Lupper discloses that authentication includes utilizing a SIM 
card in communications with a server ([0092]), which meets the limitation of authenticating the 
client by a server associated with said WPAN based on a smart card/universal subscriber identity 
module card/subscriber identity module card. 

Referring to claim 6, Lupper discloses that a database exists for billing purposes with 
respect to the services ([0080]), which meets the limitation of modifying accounting data from 
the public wireless local area network to include charging data record fields for the client. 

Referring to claim 14, Lupper discloses a generic WLAN architecture wherein a 
subscriber name and password are obtained from the subscriber and compared to locally 
available subscriber data records ([0078]), which meets the limitation of a first adapter for 
generating a password for the client. The subscriber name and password are compared with the 
data records to determine whether the subscriber can use services in the local area network 
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([0080]). Authentication is performed by a RADIUS server ([0051]), which meets the limitation 
of wherein the password is used for authenticating the client by a Remote Authentication Dial-In 
User Service (RADIUS) server. Lupper discloses that authentication includes utilizing a SIM 
card in communications with a server ([0092]), which meets the limitation of a smart card for a 
client. Lupper does not disclose that the passwords are one-time passwords. However, it would 
have been obvious to one of ordinary skill in the art at the time the invention was made to use 
one-time entropy passwords in the WLAN of Lupper in order to reduce the security risks that are 
introduced from using fixed user information by using single use passwords that cannot be 
reused by an intruder as taught by Chang (Col. 2, lines 12-24). Lupper and Chang do not specify 
passwords that are generated using an identifier, encryption key, and a character string. Borgelt 
discloses passwords generated utilizing an identifier (Figure 2, 200), encryption key (Figure 2, 
202), and a software code (Figure 2, 201). It would have been obvious to one of ordinary skill in 
the art at the time the invention was made to generate the passwords of Lupper, as modified with 
Chang, with an identifier, key, and addition character string, in order to utilize passwords that are 
unique to users and not easily obtainable as taught by Borgelt (Col. 2, lines 7-11). 

Referring to claim 15, Lupper discloses that authentication includes utilizing a SIM card 
in communications with a server ([0092]), which meets the limitation of a second adapter for 
authenticating the client by a second server based on the smart card. 
8. Claims 7-11, 16, 18 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Lupper, U.S. Publication No. 2003/0171 1 12, in view of Chang, U.S. Patent No. 6,715,082, in 
view of Borgelt, U.S. Patent No. 5,398,285, and in further view of Lupien, U.S. Patent No. 
6,463,055. Referring to claims 7-9, 16, Lupper does not disclose where or how the passwords are 
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generated. Lupien discloses a wireless network authentication system wherein a password is 
generated at a first station and compared with a password generated by a mobile terminal using 
the IMSI of the mobile terminal to authenticate the mobile terminal to access the network (Col. 
10, line 56 - Col. 11, line 10), which meets the limitation of creating is independently performed 
by each of two entities, creating comprises utilizing international mobile subscriber identity 
(IMSI) of the client, creating comprises utilizing a pseudonym of the client, the first and second 
adapters reside on separate devices, a fourth adapter for generating the password for the client. It 
would have been obvious to one of ordinary skill in the art at the time the invention was made to 
substitute the password of Lupper with the password of Lupien because such a modification 
would have yielded the predictable result of mobile terminal authentication. 

Referring to claims 10-11, Lupper does not disclose where or how the passwords are 
generated. Lupien discloses a wireless network authentication system wherein a password is 
generated utilizing cipher keys (Col. 10, lines 58-61), which meets the limitation of creating 
comprises utilizing Point-to-Point Encryption Send-Key/Recv-Key. It would have been obvious 
to one of ordinary skill in the art at the time the invention was made to substitute the password of 
Lupper with the password of Lupien because such a modification would have yielded the 
predictable result of mobile terminal authentication. 

9. Claim 17 is rejected under 35 U.S.C. 103(a) as being unpatentable over Lupper, U.S. 
Publication No. 2003/0171 1 12, in view of Chang, U.S. Patent No. 6,715,082, in view of Borgelt, 
U.S. Patent No. 5,398,285, and in further view of Kalavade, U.S. Publication No. 2003/0051041. 
Referring to claim 17, Lupper discloses utilizing RADIUS and GPRS environments but does not 
disclose modifying RADIUS accounting data to generate GPRS accounting data. Kalavade 
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discloses modifying RADIUS accounting data to generate GPRS accounting data ([0233]). It 
would have been obvious to one of ordinary skill in the art at the time the invention was made to 
modify RADIUS accounting information in Lupper to generate GPRS accounting information in 
order to provide combined LAN/WAN based authentication on a single account and receive a 
single bill as taught by Kalavade ([0063]-[0066]). 

10. Claim 19 is rejected under 35 U.S.C. 103(a) as being unpatentable over Lupper, U.S. 
Publication No. 2003/0171 1 12, in view of Chang, U.S. Patent No. 6,715,082, in view of Lupien, 
U.S. Patent No. 6,463,055, in view of Borgelt, U.S. Patent No. 5,398,285, and further in view of 
Kalavade, U.S. Publication No. 2003/0051041 . Referring to claim 19, Lupper discloses a generic 
WLAN architecture wherein a subscriber name and password are obtained from the subscriber 
and compared to locally available subscriber data records ([0078]), which meets the limitation of 
creating a password for a client, storing the password and identification information on a 
RADIUS server. The subscriber name and password are compared with the data records to 
determine whether the subscriber can use services in the local area network ([0080]). 
Authentication is performed by a RADIUS server ([0051]), which meets the limitation of 
utilizing the password and the identification information to authenticate the client on the 
RADIUS server. Lupper discloses that authentication includes utilizing a SIM card in 
communications with a server ([0092]), which meets the limitation of a smart card for a client. 
Lupper does not disclose that the passwords are one-time passwords. However, it would have 
been obvious to one of ordinary skill in the art at the time the invention was made to use one- 
time entropy passwords in the WLAN of Lupper in order to reduce the security risks that are 
introduced from using fixed user information by using single use passwords that cannot be 
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reused by an intruder as taught by Chang (Col. 2, lines 12-24). Chang does not disclose 
generating the one-time passwords using client identification information. Lupien discloses a 
wireless network authentication system wherein a password is generated at a first station and 
compared with a password generated by a mobile terminal using the IMSI of the mobile terminal 
to authenticate the mobile terminal to access the network (Col. 10, line 56 - Col. 11, line 10), 
which meets the limitation of creating a password for a client based on identification information 
of the client. It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to generate the one-time passwords suggested by Chang using the user 
identification information of Lupper because such a modification would have yielded the 
predictable result of mobile terminal authentication. Lupper and Chang do not specify passwords 
that are generated using an identifier, encryption key, and a character string. Borgelt discloses 
passwords generated utilizing an identifier (Figure 2, 200), encryption key (Figure 2, 202), and a 
software code (Figure 2, 201). It would have been obvious to one of ordinary skill in the art at 
the time the invention was made to generate the passwords of Lupper, as modified with Chang, 
with an identifier, key, and addition character string, in order to utilize passwords that are unique 
to users and not easily obtainable as taught by Borgelt (Col. 2, lines 7-11). Lupper discloses 
utilizing RADIUS and GPRS environments but does not disclose modifying RADIUS 
accounting data to generate GPRS accounting data. Kalavade discloses modifying RADIUS 
accounting data to generate GPRS accounting data ([0233]). It would have been obvious to one 
of ordinary skill in the art at the time the invention was made to modify RADIUS accounting 
information in Lupper to generate GPRS accounting information in order to provide combined 
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LAN/WAN based authentication on a single account and receive a single bill as taught by 
Kalavade ([0063]-[0066]). 

Conclusion 

1 1 . Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

12. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to BENJAMIN E. LANIER whose telephone number is (571)272- 
3805. The examiner can normally be reached on M-Th 7:00am-5:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on 571-272-3799. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



/Benjamin E Lanier/ 

Primary Examiner, Art Unit 2432 



